Jose Conti vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-97239MCP Content Manager Lite (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-09-30CVE Database V5CVE-2026-97239 Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions. EPSS 0.3%Vulnerability Jose Conti CWE-862	CVE Database V5	2026-09-30
High	7.5	EPSS 0.2%	CVE-2026-40741Redsys for WooCommerce Light (WordPress plugin) · Missing Authorization High7.5EPSS 0.2%2026-06-15CVE Database V5CVE-2026-40741 CVE-2026-40741 is a high-severity vulnerability in Redsys for WooCommerce Light versions up to and including 7.0.0. It involves unauthenticated broken access control (CWE-862), allowing unauthorized users to perform actions that should require authorization. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant impact on integrity without requiring user interaction or privileges. No official patch or remediation guidance is currently available from the vendor. EPSS 0.2%Vulnerability Jose Conti CWE-862	CVE Database V5	2026-06-15
High	7.1	EPSS 0.4%	CVE-2025-32503Link Shield (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-04-09CVE Database V5CVE-2025-32503 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Conti Link Shield link-shield allows Stored XSS.This issue affects Link Shield: from n/a through <= 0.5.4. EPSS 0.4%Vulnerability Jose Conti	CVE Database V5	2025-04-09

Page 1 of 1